Netsky.D

It deletes the entries belonging to several worms, including Mydoom.A, Mydoom.B and Mimail.T. It emits a sound through the internal speaker.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:

March 1, 2004

Detection updated on:

Aug. 10, 2009

Statistics

No

Proactive protection:

Yes, using TruPrevent Technologies

Brief Description

Netsky.D is a worm that deletes the entries that belong to several worms, including Mydoom.A, Mydoom.B and Mimail.T.

Netsky.D spreads via e-mail in a message with variable characteristics.

In addition, when the system date is March 2, 2004, between 6:00 a.m. and 8:59 a.m., Netsky.D emits a sound that consists of random tones through the internal speaker.

Note: on March 11, 2004, a new variant of this worm was detected by PandaLabs. This new variant creates four threads to send itself via e-mail instead of eight, and it was compiled with different options, as its code slightly differs from the original one.

Visible Symptoms

Netsky.D is easy to recognize, as it emits a sound that consists of random tones through the internal speaker when the system date is March 2, 2004, between 6:00 a.m. and 8:59 a.m.